PRIVACY POLICY

Last updated: June 2026

Who we are

This policy explains how MB "Gytis Mark" (company code: 305487006, VAT: LT100013936214, registered address: S. Nėries g. 11-17, Zarasai, LT-32121, Lithuania) — operating under the brand name Gytis Mark — collects, uses, and protects your personal data when you visit www.gytismark.com or contact us about our services.

We are the data controller for the personal data described in this policy. If you have questions, contact us at hi@gytismark.com.

What data we collect and why

We only collect personal data when there is a clear reason to do so.

When you book a call or send an enquiryWe collect your name and email address through Google Calendar. We use this to schedule and manage the call.Legal basis: Legitimate interest (managing pre-contractual communication).

When you contact us by emailWe collect your name, email address, and the contents of your message. We use this to respond to your enquiry.Legal basis: Legitimate interest.

When you use our websiteWe collect behavioural data including mouse movements, clicks, scroll depth, and session recordings through Hotjar. We use this to understand how visitors use the site and improve it.Legal basis: Consent (via cookie banner).

When you subscribe to our newsletterWe collect your name and email address. We use this to send you updates, resources, and occasional marketing content.Legal basis: Consent. You can withdraw this at any time by clicking unsubscribe in any email or by contacting hi@gytismark.com.

When you become a clientWe collect your name, email, company name, and any information you share with us during the course of the engagement — including access to tools, project files, and communications. We use this to deliver the services under our agreement.Legal basis: Contract.

Our website is not intended for anyone under the age of 16.

How long we keep your data

Data typeRetention periodBooking enquiries (non-clients)12 months from the enquiry dateClient project dataDuration of the engagement plus 3 yearsNewsletter subscribersUntil you unsubscribeHotjar session data365 days (Hotjar default)Email correspondence3 years from last contact

Who we share your data with

We do not sell, rent, or trade your personal data. We share it only with the following service providers who process it on our behalf:

Hotjar (session recording and heatmaps) — Hotjar Limited, Malta. Hotjar records visitor behaviour including mouse movements, clicks, and scroll depth. Data may be transferred outside the EU under Standard Contractual Clauses. Privacy policy: hotjar.com/legal/policies/privacy.

Google Calendar (call scheduling) — Google LLC, USA. Used to manage booking requests. Data transfers to the US are covered by Standard Contractual Clauses. Privacy policy: policies.google.com/privacy.

Google Fonts (typography) — Google LLC, USA. Our website loads fonts from Google's servers, which may process your IP address. Privacy policy: policies.google.com/privacy.

LinkedIn Insight Tag (ad conversion tracking and retargeting) — LinkedIn Ireland Unlimited Company. May transfer data outside the EU under Standard Contractual Clauses. Privacy policy: linkedin.com/legal/privacy-policy.

Google Analytics 4 (website analytics) — Google LLC, USA. Data transfers to the US are covered by Standard Contractual Clauses. Privacy policy: policies.google.com/privacy.

Webflow (website hosting and infrastructure) — Webflow Inc., USA. Our website is built and hosted on Webflow. Data transfers to the US are covered by Standard Contractual Clauses. Privacy policy: webflow.com/legal/privacy.

We may also disclose personal data if required by law or to protect our legal rights.

International data transfers

Several of our service providers are based in the United States. Where personal data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place — specifically Standard Contractual Clauses approved by the European Commission. You can request more information about these safeguards by contacting hi@gytismark.com.

Cookies

Essential cookies — required for the website to function. These cannot be disabled.

Analytics and behaviour cookies — used to understand how visitors use the site (Hotjar). These are only set with your consent via our cookie banner. You can withdraw consent at any time by updating your preferences in the cookie banner or by clearing cookies in your browser settings.

We do not use advertising or retargeting cookies.

For more information about managing cookies, visit allaboutcookies.org.

Your rights under GDPR

If you are based in the EU/EEA, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your data (subject to legal retention obligations)
  • Restrict how we process your data in certain circumstances
  • Object to processing based on legitimate interests
  • Portability — receive your data in a machine-readable format
  • Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email hi@gytismark.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Lithuanian supervisory authority:

State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija — VDAI)Website: vdai.lrv.ltEmail: ada@vdai.lrv.lt

Security

We take reasonable technical and organisational measures to protect your personal data. All data in transit is encrypted via HTTPS. No internet transmission is completely secure and we cannot guarantee absolute security.

Changes to this policy

We may update this policy when our practices change or when required by law. The "Last updated" date at the top reflects the current version. Continued use of our website after an update means you accept the revised policy.

Contact

MB "Gytis Mark"S. Nėries g. 11-17, Zarasai, LT-32121, Lithuania
Company code: 305487006 · VAT: LT100013936214
hi@gytismark.com · www.gytismark.com